CVE-2024-44251

Vulnerability

A vulnerability exists in iOS and iPadOS that allows an attacker to view restricted content from the lock screen. The issue, tracked as CVE-2024-44251, was addressed through improved state management in iOS 18.1 and iPadOS 18.1 for iPhone XS and later [1]. The exact affected versions prior to 18.1 are not specified in the references [1].

Exploitation

An attacker needs physical access to a locked device [1]. The attacker interacts with the lock screen to access content that should be restricted [1]. No additional authentication or special privileges are required beyond physical proximity to the locked device [1].

Impact

A successful attacker can view sensitive user information that is normally hidden on the lock screen, leading to an information disclosure [1]. The attacker does not gain full device access or persistent control; the compromise is limited to what is visible from the lock screen [1].

Mitigation

The vulnerability is fixed in iOS 18.1 and iPadOS 18.1, released on October 28, 2024, for iPhone XS and later [1]. Users should update to the latest available version. Apple did not disclose a workaround for systems that cannot be updated [1].